mrdebug/lara-file-encrypter
Composer 安装命令:
composer require mrdebug/lara-file-encrypter
包简介
LaraFileEncrypter: A Laravel package enabling secure and seamless management of encrypted files without the need for persistent key storage.
关键字:
README 文档
README
LaraFileEncrypter is a Laravel package, designed to enhance file security in your applications. With a straightforward integration, it enables you to easily implement AES-256 encryption. What sets LaraFileEncrypter apart is its unique approach: delivering maximum security without the need for key storage. Now, securing your files becomes a straightforward process, ensuring data confidentiality without added complexity.
How does it work?
LaraFileEncrypter simplifies file security by eliminating the need to manage encryption keys. Instead, the process relies on the use of a user-chosen password.
When encrypting a file, LaraFileEncrypter generates an encryption key based on the provided password. It's this key, derived from the password, that is used to secure your files using the AES-256 algorithm.
This approach removes the necessity of storing or managing separate encryption keys. By choosing a robust password, you ensure effective protection of your files without the complexity associated with traditional key management.
Pros and cons
| Pros | Cons |
|---|---|
| No key storage | Loss of password leads to unrecoverable file |
| Each user can encrypt their files with a unique password | AES keys potentially less robust than truly random methods |
| No modifications needed on the files infrastructure or database side | Potentially predictable keys |
Convinced ? 🙂
If you find this project useful, please consider giving it a star⭐. It helps me prioritize and focus on keeping project up-to-date. Thank you for your support!
Installation
composer require mrdebug/lara-file-encrypter
Usage
This package provides a facade called LaraFileEncrypter.
Encrypt a file
The encryptFile method public function encryptFile(string $filePath, string $rawPassword) locates a file and replaces its existing content with his encrypted content using the provided password. The password must be provided in raw text.
Example :
LaraFileEncrypter::encryptFile( storage_path('app/files/secret-file.pdf'), 'mysecurerawpassword' );
You can add a salt :
LaraFileEncrypter::encryptFile( storage_path('app/files/secret-file.pdf'), 'mysecurerawpassword'.$salt );
Decrypt a file
The LaraFileEncrypter facade provides two methods for decrypting a file. One method streamDownload (decryptAndStreamDownloadFile()) the file, while the other decrypts the file's content (decryptContentFile()).
public function decryptAndStreamDownloadFile(string $filePath, string $rawPassword)
and
public function decryptContentFile(string $filePath, string $rawPassword)
Examples :
LaraFileEncrypter::decryptAndStreamDownloadFile( storage_path('app/files/secret-file.pdf'), 'mysecurerawpassword' );
and
LaraFileEncrypter::decryptContentFile( storage_path('app/files/secret-file.pdf'), 'mysecurerawpassword' );
You must, of course, provide the same password as used in the encryption step.
License
This package is licensed under the license MIT.
Other Projects
Explore my other projects on GitHub:
- Crud Generator Laravel: Create a Laravel 10 CRUD in a few seconds
mrdebug/lara-file-encrypter 适用场景与选型建议
mrdebug/lara-file-encrypter 是一款 基于 PHP 开发的 Composer 扩展包,目前已累计 685 次下载、GitHub Stars 达 41, 最近一次更新时间为 2023 年 12 月 07 日, 在 PHP 生态内属于活跃度较高的组件。
它主要适用于以下技术方向: 「security」 「encryption」 「laravel」 「encrypt」 「decryption」 「decrypt」 等业务场景。在实际项目中,围绕这些方向常见需要落地的问题包括:接口对接、性能调优、并发安全、与既有框架(Laravel / ThinkPHP / Yii / Webman 等)的兼容适配,以及生产环境的日志埋点与稳定性保障。
我们在过去多个企业项目中使用过 mrdebug/lara-file-encrypter 或与其功能相近的方案,如果你在选型或落地过程中遇到问题,例如 版本兼容、二次改造、私有化封装、与内部系统对接、生产 BUG 排查,欢迎联系我们协助评估。
基于 mrdebug/lara-file-encrypter 在你已有业务上做功能扩展、字段裁剪、UI 适配、与内部账号 / 权限 / 日志系统的深度对接。
线上偶发问题、内存泄漏、慢查询、并发异常等排查修复;针对高流量场景做缓存、队列、索引层面的调优。
承接完整的项目从需求 → 设计 → 开发 → 上线 → 长期运维;也可按月提供技术保姆服务。
与 mrdebug/lara-file-encrypter 相关的其它包
同方向 / 同关键字的高下载量 PHP Composer 包推荐,方便对比选型:
A simple PHP class to encrypt a string and decrypt an encrypted string
A package for automatically encrypting and decrypting Eloquent attributes in Laravel 5.5+, based on configuration settings.
Provide a way to secure accesses to all routes of an symfony application.
Encryption with AES-256 and HMAC-SHA256
Allows installation of Laravel where the PHP Mcrypt extension is not available. Provides encryption using OpenSSL, or by disabling encryption entierly.
High-level cryptographic primitives and security utilities for Maatify systems including password hashing, reversible encryption, HKDF key derivation, and key rotation.
统计信息
- 总下载量: 685
- 月度下载量: 0
- 日度下载量: 0
- 收藏数: 41
- 点击次数: 25
- 依赖项目数: 0
- 推荐数: 0
其他信息
- 授权协议: MIT
- 更新时间: 2023-12-07